Added explanation on Authorization header format